Var1200-H Firmware Security Vulnerabilities - CVSS Score 9 - 10

CVE-2024-37023

Multiple OS command injection vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, softwareversions 3.3.23.6.9 and prior, enable an authenticated remote attackerto execute arbitrary OS commands via various endpoint parameters.

CVE-2024-39815

Improper check or handling of exceptional conditions vulnerabilityaffecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an unauthenticatedremote attacker to cause a denial of service. A specially-craftedHTTP request to pre-authentic...